Global Infrastructure Section

Question 1

AWS DNS Records

Answer 1

• www.google.com => 12.34.56.78 == A record (IPv4)
• www.google.com => 2001:0db8:85a3:0000:0000:8a2e:0370:7334 == AAAA IPv6
• search.google.com => www.google.com == CNAME: hostname to hostname
• example.com => AWS resource == Alias (ex: ELB, CloudFront, S3, RDS, etc…)

Question 2

Amazon Route 53

Answer 2

• Route53 is a Managed DNS (Domain Name System)
• DNS is a collection of rules and records which helps clients understand
how to reach a server through URLs

Question 3

AWS CloudFront

Answer 3

• Content Delivery Network (CDN)
• Improves read performance, content is cached at the edge
• Improves users experience
• 216 Point of Presence globally (edge locations)
• DDoS protection (because worldwide), integration with Shield, AWS Web Application Firewall

Question 4

CloudFront – Origins

Answer 4

S3 bucket
• For distributing files and caching them at the edge
• Enhanced security with CloudFront Origin Access Identity (OAI)
• CloudFront can be used as an ingress (to upload files to S3)

Custom Origin (HTTP) 
• Application Load Balancer 
• EC2 instance 
• S3 website (must first enable the bucket as a static S3 website) 
• Any HTTP backend you want

Question 5

CloudFront vs S3 Cross Region Replication

Answer 5

CloudFront:
• Global Edge network
• Files are cached for a TTL (maybe a day)
• Great for static content that must be available everywhere

S3 Cross Region Replication:
• Must be setup for each region you want replication to happen
• Files are updated in near real-time
• Read only
• Great for dynamic content that needs to be available at low-latency in few regions

Question 6

S3 Transfer Accelerator

Answer 6

Increase transfer speed by transferring file to an AWS edge location
which will forward the data to the S3 bucket in the target region

Question 7

AWS Global Accelerator

Answer 7

• Improve global application availability and performance using the AWS
global network
• Leverage the AWS internal network to optimize the route to your application (60% improvement)
• 2 Anycast IP are created for your application and traffic is sent through
Edge Locations
• The Edge locations send the traffic to your application

Question 8

AWS Global Accelerator vs CloudFront

Answer 8

• They both use the AWS global network and its edge locations around the world
• Both services integrate with AWS Shield for DDoS protection.

CloudFront – Content Delivery Network
• Improves performance for your cacheable content (such as images and videos)
• Content is served at the edge

Global Accelerator
• No caching, proxying packets at the edge to applications running in one or more AWS Regions.
• Improves performance for a wide range of applications over TCP or UDP
• Good for HTTP use cases that require static IP addresses
• Good for HTTP use cases that required deterministic, fast regional failover

Question 9

AWS Outposts

Answer 9

• AWS Outposts are “server racks” that offers the same AWS infrastructure, services, APIs & tools to build your own applications on-premises just as in the cloud
• AWS will setup and manage “Outposts Racks” within your on-premises infrastructure and you can start leveraging AWS services on-premises
• You are responsible for the Outposts Rack physical security

Question 10

AWS WaveLength

Answer 10

• infrastructure deployments embedded within the telecommunications providers’
datacenters at the edge of the 5G networks
• Ultra-low latency applications through 5G networks
• Traffic doesn’t leave the Communication Service Provider’s (CSP) network
• High-bandwidth and secure connection to the parent AWS Region

Question 11

AWS WaveLength

Answer 11

• infrastructure deployments embedded within the telecommunications providers’
datacenters at the edge of the 5G networks
• Ultra-low latency applications through 5G networks
• Traffic doesn’t leave the Communication Service Provider’s (CSP) network
• High-bandwidth and secure connection to the parent AWS Region